Privacy policy

1. Information we access and collect

• Google account information. You sign in with Google through OI's own sign-in service, which receives your account identifier, verified email address, and basic profile information, including your name, and passes them to the Console. We use these to identify your account and determine your access to workspaces.
• Sign-in session. The Console keeps an encrypted session record with your identifier, email address, name, and a sign-in token that lets us end your sign-in service session when you sign out. It keeps no Google access or refresh token. Sign-in requests basic permissions only; it does not request Google Cloud, Gmail, Google Drive, Calendar, or Contacts permissions. The Console acts on its Kubernetes cluster as you, so your access remains limited by cluster and workspace permissions.
• Workspace information. We process account roles, workspace membership, invitations, workload and storage metadata, configuration and secrets you submit, and the resource data, logs, and terminal traffic you choose to access through the Console.
• Operational information. Request and error records may include your account email, operation, response status, and timing. Hosting infrastructure may also record network and device information. If you submit feedback or contact support, we receive the information you include.

2. How we use information

We use this information to sign you in, restore your session, enforce permissions, provide the workspace operations you request, respond to support and feedback, and secure and operate the Console. Google sign-in supports these visible Console features; we do not use it to browse unrelated Google Cloud resources.

We do not sell Google user data, use it for advertising, or use it to train AI models. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.

3. Storage, security, and retention

Session records are encrypted on the server. Production sign-in uses HTTPS and HttpOnly session cookies. Necessary cookies and browser storage maintain your session and remember your account and workspace preferences. We do not ask for or store your Google password.

Console sessions end no later than 24 hours after you last authenticated with Google, and the sign-in service's own session ends within the same time. Signing in again is automatic on a browser that has signed in before while that session lasts. Sign-in attempts are logged with their outcome and your email address, never with tokens. Expired records cannot authenticate, and expired authentication records are deleted as cleanup runs. Revocation records may remain temporarily to prevent reuse of signed-out sessions.

Account and workspace records remain while needed to provide access and operate workspaces. Workload resources remain until deleted through the service or by an authorized administrator. Operational and support records are retained as needed to investigate issues, prevent abuse, maintain an audit history, or meet legal obligations. Contact us to request deletion of your personal information.

Access to personal information is limited to authorized personnel and service providers who need it to operate, support, or secure the service. No system can guarantee absolute security.

4. When information is shared

• Google and infrastructure providers. Google processes sign-in. Hosting and compute providers process data needed to operate the Console and workloads you choose to run. Sign-in tokens are not included in credentials copied to workspace agents.
• Administrators and collaborators. Authorized administrators can view account and access information. Workspace members can see information and resources allowed by their roles. Sharing a workspace may make its owner and membership information visible to authorized collaborators.
• Legal and security needs. We may disclose information when required by law or necessary to investigate abuse and protect the service and its users. Other disclosures require your direction or consent. Transfers of Google user data remain subject to the Limited Use requirements above.

We operate from the United States. Service providers and workload locations may process information in other countries, depending on the infrastructure used for the service and your workloads.

5. Your choices and deletion requests

• Sign out ends the current Console session and the sign-in service's session. Signing out also stops automatic sign-in on this browser for 24 hours.
• You can review or remove the sign-in service's access to your account in your Google Account connections. Removing it can affect other OI applications that use the same sign-in service.
• Request access, correction, or deletion of your personal information at privacy@openinteraction.com. We may verify your identity before acting. Removing Google access does not itself delete your workspaces, workloads, or shared resources; tell us which account or data your deletion request concerns. We may retain information required for legal or security purposes or to preserve other users' access to shared resources.

6. Children, changes, and contact

The Console is intended for work and technical use and is not directed to children under 16. Contact us if you believe a child has provided personal information. We may update this policy as the service changes and will update the date above. Material changes to Google data use will be disclosed before that new use begins, with additional consent where required.

Privacy requests: privacy@openinteraction.com. Console support: chen@openinteraction.com. Operator: Open Interaction, Inc., United States.